amnezia-vpn / amnezia-client

Amnezia VPN Client (Desktop+Mobile)
https://amnezia.org
GNU General Public License v3.0
5.79k stars 360 forks source link

amnezia android client trying connecting to ssh without credentials #379

Closed stanislavvv closed 8 months ago

stanislavvv commented 1 year ago

Amnezia android client try to connect to ssh when connecting with shared connection (not server):

Oct 17 14:41:04 ftn sshd[2219949]: Invalid user  from x.x.x.x port 39894
Oct 17 14:41:04 ftn sshd[2219949]: Failed none for invalid user  from x.x.x.x port 39894 ssh2

If my wife and children connect to vpn in several minutes interval - fail2ban ban all connections to vds, because too many ssh errors from ip.

To Reproduce Steps to reproduce the behavior:

  1. create server (in my case - cloak+openvpn)
  2. share connection (not server) to another client
  3. connect with shared connection
  4. see ssh logs

Expected behavior No ssh interaction at all with shared connection.

stanislavvv commented 1 year ago

forgot version: 3.0.10

pokamest commented 1 year ago

Looks like you had shared full access to your family, usually you don't need to share full access, just share vpn configs. By the way, AmneziaVPN 4.0.8 beta is released, you can try it - https://github.com/amnezia-vpn/amnezia-client/releases/tag/4.0.8

stanislavvv commented 1 year ago

It was not "Share server", it was "Share for Amnezia". In decoded url i does not see user/password.

stanislavvv commented 1 year ago

In 4.0.8 only first connect try to login with empty user. In Debian terminology — minor bug.

stanislavvv commented 1 year ago

Previous messsage - only for testing in same phone... When i share connection ("Share for Amnezia") with another phone, take "Internal error" and in app log see:

2023-10-18 11:25:59 critical "Access denied for 'password'. Authentication that can continue: publickey,password"

and in server logs same records as in 1st message

pokamest commented 8 months ago

@stanislavvv please report if problem is still exists in latest release 4.4

stanislavvv commented 8 months ago

No ssh connects in vpn access. I think issue resolved.